CVE-2003-0388

CVE-2003-0388 describes a privilege escalation vulnerability in pam_wheel within Linux-PAM 0.78, specifically when the trust option is enabled and use_uid is disabled. A local attacker can exploit this by spoofing getlogin() return values, leading to manipulated log entries and elevated privileges. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability requires local access and has low attack complexity, potentially impacting confidentiality, integrity, and availability. While not on the KEV catalog or Hot List, and with no active Metasploit or Nuclei exploits, an ExploitDB entry (EDB-22781) exists, though there is minimal community discussion or media coverage.